Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/323830343a336165383a3a2f33322d3334203d3e20323636313137.roa
File:                     323830343a336165383a3a2f33322d3334203d3e20323636313137.roa (raw, json)
Hash identifier:          Zki/I6v/iIlUl7y1nwDE63+38oPr35Uy7AaxxhRDtZI=
Subject key identifier:   8C:99:D5:46:0A:6A:55:07:23:BB:B2:BC:78:84:63:D4:BE:FE:D7:79
Certificate issuer:       /CN=91EB2E701826E3D89FC9609A6F9ACE7FC24516EA
Certificate serial:       0DCA5CCAD20471A35FBCA99AA68C13AC744D4C79
Authority key identifier: 91:EB:2E:70:18:26:E3:D8:9F:C9:60:9A:6F:9A:CE:7F:C2:45:16:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/323830343a336165383a3a2f33322d3334203d3e20323636313137.roa
Signing time:             Thu 13 Jul 2023 15:00:00 +0000
ROA not before:           Thu 13 Jul 2023 14:55:00 +0000
ROA not after:            Thu 11 Jul 2024 15:00:00 +0000
asID:                     266117
IP address blocks:        2804:3ae8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ca:5c:ca:d2:04:71:a3:5f:bc:a9:9a:a6:8c:13:ac:74:4d:4c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91EB2E701826E3D89FC9609A6F9ACE7FC24516EA
        Validity
            Not Before: Jul 13 14:55:00 2023 GMT
            Not After : Jul 11 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:22:52:ed:e0:6d:30:82:ca:e5:f8:8b:de:
                    e9:a5:4e:1c:25:f9:59:d6:ad:40:1b:47:bd:2a:57:
                    ba:73:87:8b:0d:bb:70:12:62:34:b6:99:4f:85:e5:
                    df:ea:66:17:47:3a:15:3d:82:fa:5a:c0:6b:cf:10:
                    5b:fc:77:38:7c:12:10:b0:cc:9b:76:96:8f:7f:75:
                    4c:f7:c3:bc:4f:76:da:5e:72:ab:53:ce:29:26:8d:
                    af:73:d1:cd:c9:46:0b:31:88:72:ad:df:fa:a2:e1:
                    81:63:92:ee:23:e4:8c:12:f9:74:64:77:6c:b3:4d:
                    ac:08:fc:6c:02:cd:81:95:20:9a:df:ca:c5:70:16:
                    b7:c3:06:1d:33:90:0d:de:df:40:b9:91:13:e7:8f:
                    46:58:0f:3d:6e:ec:54:93:fd:c3:b0:c8:54:2c:46:
                    b1:58:1d:0a:ff:24:e4:31:f3:77:30:e2:c7:e7:fb:
                    97:a4:61:c1:8e:ea:2d:b8:af:21:7c:db:76:5d:73:
                    c5:f5:00:99:ba:04:a7:fd:fe:9d:69:24:cf:c3:d3:
                    0c:d1:29:af:e8:39:71:b8:51:f1:eb:b2:01:e8:6b:
                    4c:01:d5:2c:b8:0e:96:d5:f2:34:7c:44:85:fb:87:
                    21:32:42:13:4a:b0:1d:a3:f8:f9:64:98:fa:99:d5:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:99:D5:46:0A:6A:55:07:23:BB:B2:BC:78:84:63:D4:BE:FE:D7:79
            X509v3 Authority Key Identifier:
                keyid:91:EB:2E:70:18:26:E3:D8:9F:C9:60:9A:6F:9A:CE:7F:C2:45:16:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/323830343a336165383a3a2f33322d3334203d3e20323636313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ae8::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:3d:4e:99:15:52:6b:17:61:43:0d:b6:88:f6:52:d5:5f:39:
         a4:94:51:50:5d:40:2b:6b:bb:1b:e6:b5:8a:b0:9b:2c:fe:2c:
         88:cf:9d:42:67:16:00:3c:58:3b:97:67:a9:62:37:5c:0c:d0:
         d1:cd:88:f8:8f:62:a3:7c:00:f9:d2:05:e5:e7:b3:47:96:02:
         34:4d:72:56:c7:d1:54:fd:8b:c0:ca:65:52:af:bb:42:dc:aa:
         b2:e1:80:eb:22:bc:fb:2e:51:ca:94:02:7e:d5:54:e0:12:a5:
         49:af:4b:68:79:fe:98:ce:2b:33:74:3b:ce:c1:c7:f1:09:82:
         5c:0b:9b:07:19:e0:d0:6c:15:86:88:da:2e:65:7e:84:8f:45:
         97:d6:3e:5e:b0:3e:6b:ce:ed:42:f1:4e:92:01:ea:3b:29:0b:
         b2:66:00:f7:6b:8a:b5:d3:62:1a:62:d6:c6:09:b5:80:3e:e6:
         d7:dd:b2:75:c1:a3:f6:cc:be:a6:8c:d7:a2:6a:7c:ad:97:53:
         c7:1c:38:6a:ee:31:f8:d1:ae:2f:e2:bb:c8:03:26:bf:68:40:
         5e:79:b9:1e:2d:44:c7:e3:d9:f3:bb:4f:9d:21:08:c6:4d:30:
         b3:2d:0a:4e:3e:db:52:86:67:b6:17:50:71:85:12:4a:ec:e0:
         af:cb:39:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org